Branch protection on main not adhering to best practices

[mapbox-github-ci-issues-4]

👋 Hey there! It's Changebot, and I help repositories follow our engineering best practices. My magic wand found some things I wanted to highlight for your review:

Item	Current status	Best practice guidelines
main branch protection: Restrict who can push to this branch	Unchecked	Checked

Can you take a look at these best practices and make any adjustments if needed?

Please tag @mapbox/security-and-compliance on this issue if you have any questions